[Introspective] no more plain text?

[Dave Ewart]

On Monday, 17.02.2003 at 19:13 -0000, Matt Davis wrote:

> I'd just like to point out... before I get flamed by you all... That I
> did not send this e-mail... I've never heard of the person before and
> would love to know how this abuse can happen!?

Using a 'fake from' address is easy, sadly - it's just like putting a
different 'Sender' address on a conventional postal letter.  There's
nothing that stops someone doing this.

The only way to be really sure of the origin of a message is to use
digital signatures, and to only allow signed and verified messages out
on to a list such as Intro.  This is very simple in theory, but not
terribly easy in practice, especially on a large list.

Dave.

-- 
Dave Ewart
Davee at SunGate.co.uk
PGP key available from http://www.SunGate.co.uk/
Fingerprint: AEC5 9360 0A35 7F66 66E9 82E4 9E10 6769 CD28 DA92